A password management device and system

Abstract

The application discloses a password management device and system, the password management device comprises a password collection device and a password management device; the password collection device is connected with the password management device, and is used for collecting a first password input by a user and transmitting the first password to the password management device; the password management device is connected with an external device, is used for acquiring a working state of the external device, determining a device state according to the working state of the external device, and performing password management according to the device state and the first password; the device state is a storage state and a non-storage state; the application solves the problem that multiple interfaces are occupied when the password is used; the password management device switches the device state according to the working state of the external device, integrates multiple functions into one, realizes the function of multiple uses of one device, only needs one interface when connected with the external device, effectively saves interface resources, is more convenient to use, realizes different functions through one product, is convenient to manage and carry, and improves user experience.

Description

Technical Field

[0001] This invention relates to the field of security management technology, and in particular to a cryptographic management device and system. Background Technology

[0002] As people place increasing importance on personal privacy, passwords are being used more and more frequently in daily life, and various encryption methods are emerging in different situations. Consequently, people are setting more and more passwords, making forgetting passwords a major pain point for users. The emergence of biometric encryption technology has successfully solved this problem. Taking fingerprint recognition as an example, existing technologies include fingerprint USB drives and fingerprint login devices.

[0003] However, the fingerprint login device can only be used as a password, and the fingerprint USB flash drive can only be used as a storage disk. When using the two products at the same time, they need to be connected separately. If they are connected via an interface, two interfaces are required, which is very inconvenient when portable products have few interfaces. Using the two products at the same time requires carrying two products and connecting them separately, which is inconvenient, costly, and results in a poor user experience. Summary of the Invention

[0004] This invention provides a password management device and system to solve the problem of multiple interfaces being occupied during password use.

[0005] According to one aspect of the present invention, a password management device is provided, comprising: a password acquisition device and a password management device;

[0006] The password acquisition device is connected to the password management device and is used to acquire the first password entered by the user and transmit it to the password management device.

[0007] The password management device is connected to an external device and is used to obtain the working status of the external device, determine the device status based on the working status of the external device, and perform password management based on the device status and a first password. The device status is either a storage status or a non-storage status.

[0008] According to another aspect of the present invention, a password management system is provided, comprising: a password management device as described in any embodiment of the present invention and an external device, wherein the password management device includes a password acquisition device and a password management device;

[0009] The password acquisition device is connected to the password management device and is used to acquire the first password entered by the user and transmit it to the password management device of the password management device.

[0010] The password management device is connected to the external device and is used to obtain the working status of the external device, determine the device status based on the working status of the external device, and perform password management based on the device status and a first password. The device status is either a storage status or a non-storage status.

[0011] The technical solution of this invention provides a password management device comprising: a password acquisition device and a password management device; the password acquisition device, connected to the password management device, is used to acquire a first password input by a user and transmit it to the password management device; the password management device, connected to an external device, is used to obtain the working status of the external device, determine the device status based on the working status of the external device, and perform password management based on the device status and the first password. The device status can be a storage state or a non-storage state, solving the problem of occupying multiple interfaces when using passwords. The password management device, through connection to the external device, obtains the working status of the external device and switches the device status according to the working status of the external device. The device status is either a storage state or a non-storage state. The storage state enables password storage, while the non-storage state enables other functions. The password management device can achieve corresponding functions by switching device statuses, thereby processing the first password accordingly. The password management device of this application can switch its own device status according to the working status of the external device, integrating storage and other functions into one device, realizing multiple uses of one device. When connected to an external device, only one interface is needed, effectively saving interface resources, making it more convenient to use, and achieving different functions with one product, facilitating management and portability, and improving the user experience.

[0012] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0013] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0014] Figure 1 This is a schematic diagram of the structure of a password management device according to Embodiment 1 of the present invention;

[0015] Figure 2 This is a schematic diagram of the structure of a password management device according to Embodiment 2 of the present invention;

[0016] Figure 3This is a schematic diagram of the structure of a password management device according to Embodiment 3 of the present invention;

[0017] Figure 4 This is a schematic diagram illustrating an example of the collaborative operation of a password management device and a storage device according to Embodiment 3 of the present invention.

[0018] Figure 5 This is a schematic diagram of the structure of a cryptographic management system provided in Embodiment 4 of the present invention;

[0019] Figure 6 This is a schematic diagram of another password management system provided according to Embodiment 4 of the present invention. Detailed Implementation

[0020] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0021] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0022] Example 1

[0023] Figure 1 This is a schematic diagram of a password management device provided in Embodiment 1 of the present invention. This embodiment is applicable to situations involving password management, such as... Figure 1 As shown, the password management device 10 includes: a password acquisition device 11 and a password management device 12;

[0024] Password acquisition device 11 is connected to password management device 12 and is used to acquire the first password entered by the user and transmit it to password management device 12;

[0025] The password management device 12 is connected to the external device 20 and is used to obtain the working status of the external device 20, determine the device status based on the working status of the external device 20, and perform password management based on the device status and the first password. The device status is either a storage status or a non-storage status.

[0026] In this embodiment, the password acquisition device 11 can be specifically understood as a device for acquiring passwords. The password in this application can be a password in the form of characters such as numbers and letters, or a password in the form of biometrics, such as fingerprints, irises, facial features, etc. The corresponding password acquisition device 11 can be a physical or virtual keyboard capable of data input, a fingerprint sensor for acquiring fingerprints, or an image acquisition device for acquiring irises or faces. The image acquisition device can be a camera, video recorder, scanner, infrared thermal imager, etc. The password management device 12 can be specifically understood as a device for managing and processing passwords to achieve corresponding functions, such as a chip. The first password can be specifically understood as a password entered by the user, which can be a password in the form of characters, fingerprints, irises, facial features, etc.

[0027] Specifically, the password acquisition device 11 is connected to the password management device 12, either through communication or by wiring, for example, soldered onto the same circuit board and connected via pins or wires on the board. The password acquisition device 11 acquires the first password entered by the user. The first password can be entered manually via a keyboard, by placing a finger on a fingerprint sensor, or by the user facing an image acquisition device for image capture. After acquiring the first password, the password acquisition device 11 sends it to the password management device 12.

[0028] In this embodiment, the external device 20 can be an electronic device such as a desktop computer, laptop computer, or tablet; the working state can be specifically understood as the work currently being performed by the external device, such as account login or data access; the device state can be specifically understood as the state of the password management device 10, which can be a storage state or a non-storage state. The password management device 10 performs different functions in different device states. In the storage state, it can act as a password encryption storage device to perform password storage function. In the non-storage state, it can act as a login device to perform login function, or as an encryptor to perform data encryption function, and so on.

[0029] Specifically, the password management device 12 connects to the external device 20 via an interface. For example, the password management device 10 can be plugged into the external device 20 through an interface and connect to the external device 20 via the interface, or it can connect via communication. After connecting to the external device 20, the password management device 12 obtains the working status of the external device 20. This can be done by actively sending a communication request to the external device 20 to obtain its working status, or by the external device 20 actively sending its working status to the password management device 12. The device's own device status is switched in accordance with the working status of the external device 20. The password management device 12 determines its own device status by analyzing the working status of the external device 20. A pre-set correspondence between the working status of the external device 20 and the device status can be used to determine the device status after determining the working status of the external device 20.

[0030] The technical solution of this invention provides a password management device comprising: a password acquisition device and a password management device; the password acquisition device, connected to the password management device, is used to acquire a first password input by a user and transmit it to the password management device; the password management device, connected to an external device, is used to acquire the working status of the external device, determine the device status based on the working status of the external device, and perform password management based on the device status and the first password. The device status can be a storage state or a non-storage state, solving the problem of occupying multiple interfaces when using passwords. The password management device, through connection to the external device, acquires the working status of the external device and switches the device status according to the working status of the external device. The device status can be either a storage state or a non-storage state. The storage state enables password storage, while the non-storage state enables login, encryption, and other functions. The password management device can achieve corresponding functions by switching device statuses, thereby processing the first password accordingly. The password management device of this application can switch its own device status according to the working status of the external device, integrating storage and other functions into one device, realizing multiple uses of one device. When connected to an external device via an interface, only one interface is needed, effectively saving interface resources and making it more convenient to use. Furthermore, by realizing different functions through one product, it is easy to manage and carry, improving the user experience.

[0031] Example 2

[0032] Figure 2 This is a schematic diagram of a password management device according to Embodiment 2 of the present invention. This embodiment is a refinement based on the above embodiment. Figure 2 As shown, the device further refines the password management device 12 and the non-storage state, which includes either the login state or the encrypted state.

[0033] Password management device 12, including:

[0034] The first state determination module 121 is used to determine the device state as login state when the external device's working state is account login.

[0035] The second state determination module 122 is used to determine the device state as encrypted when the external device is in the data encryption working state.

[0036] The third state determination module 123 is used to determine the device state as storage state when the external device is in password storage or data access state.

[0037] In this embodiment, the first state determination module 121, the second state determination module 122, and the third state determination module 123 are all modules used to determine the device state, and can determine different device states.

[0038] Specifically, external device 20 can perform account login operations, which can be operating system login, application login, web page login, email login, etc. When external device 20 performs an account login operation, its working state is account login, and the first state determination module 121 determines the device state to be logged in when the external device 20's working state is account login.

[0039] External device 20 can perform data encryption operations, which can encrypt documents, folders, pictures, videos, etc. Data encryption operations can be triggered by selecting encryption options or pressing a button. When external device 20 performs a data encryption operation, its operating state is data encryption. The second state determination module 122 determines the device state to be encryption state when the external device 20's operating state is data encryption.

[0040] External device 20 can also perform password storage operations or data access operations. Password storage operation refers to external device 20 instructing password management device 12 to store a password. Users can operate on external device 20, for example, triggering password setting in an application on external device 20. When setting a password, the user needs to enter a password, and the entered password is stored. Therefore, a password storage operation can be triggered accordingly to store the password. When external device 20 performs a password storage operation, its working state is storage state. Data access operation refers to the operation when external device 20 detects a device connection and accesses the connected device to obtain relevant information. When password management device 10 is connected to external device 20, external device 20 can detect the connection. Users can manually or automatically control external device 20 to access password management device 10, i.e., perform a data access operation, determining the working state as data access. Alternatively, password management device 10 can be set to actively access external device 20 after being connected. After receiving access from password management device 10, external device 20 determines its working state as data access. When the external device 20 is in the working state of password storage or data access, the third state determination module 123 determines the device state to be storage state.

[0041] Optionally, the password management device 12 is specifically used for:

[0042] When the device is in a logged-in state, the first password is matched with the first pre-stored password. If the match is successful, it is determined that the user has login privileges and feedback is sent to the external device 20 so that the external device 20 can log in to the account. If the match fails, it is determined that the user does not have login privileges and feedback is sent to the external device 20.

[0043] In this embodiment, the first pre-stored password can be understood as a password pre-stored for account login. The first pre-stored password can be determined according to the application currently being logged in, and different applications can set different first pre-stored passwords.

[0044] Specifically, the password management device 12 performs different operations and achieves different functions under different device states. When the device state is logged in, the external device 20 needs to perform an account login operation. The password management device 12 pre-stores passwords used as verification standards. When there are multiple passwords, they can be associated with corresponding applications. When associating with an application, the password can be associated with information that uniquely identifies the application, such as the application's name or identifier. The corresponding first pre-stored password can be determined by the external device 20 sending the name or identifier of the currently logged-in application or other application information to the password management device 12. The password management device 12 queries the corresponding relationship based on the received application information to determine the corresponding first pre-stored password. Alternatively, the password management device 12 can actively send a request to the external device 20 to determine the information of the application currently performing the login operation. Or, when the password management device 12 obtains the working state of the external device 20, if the external device 20 determines that the working state is account login, it directly feeds back the information of the application currently performing the login operation to the password management device 12. The information of the application currently performing the login operation can be fed back to the password management device 12 simultaneously with the working state, or they can be fed back separately. After determining the first pre-stored password, the password management device 12 matches the first password with the first pre-stored password. This matching can be performed using an algorithm. Since different types of passwords have different characteristics (e.g., fingerprints and irises have different characteristics), different algorithms can be used to match different types of passwords. If the match is successful, it is determined that the user's password input was successful and the user has login privileges. The user's login privileges are then sent as a verification result to the external device 20, which attempts to log in to the account upon receiving this feedback. If the match fails, it is determined that the user's password input was unsuccessful and the user does not have login privileges. The user's lack of login privileges is then sent as a verification result to the external device 20. Upon receiving this feedback, the external device 20 rejects the user's login attempt and may also prompt the user with login failure or incorrect password via text, voice, or other means.

[0045] Optionally, the password management device 12 is specifically used for:

[0046] When the device is in encrypted state, the first password is sent to the external device 20 so that the external device 20 can encrypt the information to be encrypted according to the first password.

[0047] In this embodiment, the information to be encrypted can be understood as information requiring encryption, such as images, videos, audio, documents, etc. When encrypting the information, the external device 20 prompts the user to enter a password and can generate a password input window for the user to enter the password. At the same time, it can determine that the working state is data encryption. At this time, the password management device 12 determines that the device state is encryption state and directly sends the first key to the external device 20. The external device 20 automatically enters the first password into the password input window to complete the password input and encrypts the information to be encrypted according to the first password.

[0048] Optionally, the password management device 12 is specifically used for:

[0049] When the device is in storage mode and a password storage instruction is received, the first password is stored.

[0050] In this embodiment, the password storage instruction can be specifically understood as a computer instruction instructing the password management device 12 to store the password. When the device is in storage mode, the password management device 12, acting as an encrypted storage device, can perform password storage. The password storage instruction can be sent to the password management device 12 by the external device 20. The user can perform password storage on the external device 20. For example, when registering an account, the password needs to be stored for subsequent login verification. Taking account registration as an example, when a user registers a user through an application on the external device 20, the user needs to set a password. The external device 20 generates a password storage instruction and sends it to the password management device 12. The password management device 12 determines that the device is in storage mode and receives the password storage instruction, and stores the collected first password. At this time, it can also store the application, account information, etc., corresponding to the first password.

[0051] The technical solution of this invention solves the problem of occupying multiple interfaces when using passwords. The password management device connects to an external device, obtains the working status of the external device, and switches the device state according to the working status of the external device. The device state is either a storage state or a non-storage state. The storage state realizes the password storage function, while the non-storage state realizes the login function and encryption function. The password management device can realize the corresponding functions by switching the device state, and then process the first password accordingly. The password management device of this application can switch the device state of the device itself according to the working status of the external device, integrating storage function and other functions into one, realizing the function of multiple uses of one device. When connecting to an external device through an interface, only one interface is needed, which effectively saves interface resources and makes it more convenient to use. Furthermore, different functions are realized through one product, which is convenient for management and portability, and improves the user experience. In addition, the login function of the password management device provided in this embodiment can turn a personal computer or desktop into a portable password device, which is convenient to carry.

[0052] Example 3

[0053] Figure 3 This is a schematic diagram of a password management device provided in Embodiment 3 of the present invention. This embodiment is a refinement based on the above embodiments. Figure 3 As shown, the password management device 12 is described in detail:

[0054] Password management device 12 is connected to storage controller 30, and storage controller 30 is connected to storage device 40, which is used to store file data; password management device 12 includes:

[0055] The matching module 124 is used to match the first password with the second pre-stored password when the device is in storage state and accesses the external device 20;

[0056] Data control module 125 is used to control the connection between external device 20 and storage controller 30 if the match is successful, so that external device 20 can access file data stored in storage device 40 through storage controller 30;

[0057] The information feedback module 126 is used to send access failure information to the external device 20 if the matching fails.

[0058] In this embodiment, the storage controller 30 is a device that performs necessary control over access to the storage device 40 according to certain timing rules, including the control of address signals, data signals, and various command signals, so that the master device (the device accessing the storage device 40) can use the storage resources on the storage device 40 according to its own requirements. The main function of the storage controller 30 is to perform interface conversion, converting read, write, and other commands issued by the master device into signals that the storage device 40 can recognize. It also needs to complete address decoding and data format conversion (such as data bit width) between the master device and the storage device 40. The storage device 40 can be a chip or other device with storage function.

[0059] In this embodiment, the matching module 124 can be specifically understood as a data processing module for password matching; the data control module 125 can be specifically understood as a data processing module for controlling the connection between the external device 20 and the storage controller 30 for data access; and the information feedback module 126 can be specifically understood as a data processing module for feeding back information to the external device 20. The second pre-stored password can be specifically understood as a pre-stored password used to verify user permissions when accessing the storage device.

[0060] Specifically, when the device is in storage mode, the password management device 12, acting as an encrypted storage device, can connect to the storage controller 30 in addition to its password storage function, to encrypt the storage device 40 connected to the storage controller 30. After the password management device 10 is connected to the external device 20, it can actively access the external device 20. When the device is in storage mode and accesses the external device, the matching module 124 obtains the pre-stored second pre-stored password. In this embodiment, the password management device 10 can be connected to only one storage controller 30, and one storage controller 30 can be connected to one storage device 40. The number of second pre-stored passwords can be one or more, all used for permission verification when accessing the storage device 40 through this storage controller 30; or the password management device 10 can be connected to multiple sets of storage controllers 30 and storage devices 40, that is, when there are multiple storage devices 40, the number of second pre-stored passwords is multiple. For each storage device 40, one or more second pre-stored passwords can be stored. During matching, the storage device 40 that needs to be accessed is determined, and the second pre-stored password corresponding to this storage device 40 is further determined. The first password is matched with the second pre-stored password. Different algorithms can be used to match different types of passwords.

[0061] Specifically, after successful matching, the data control module 125 controls the external device 20 to connect with the storage controller 30. After successful connection, the external device 20 can access the storage device 40 through the storage controller 30 and read the file data stored in the storage device 40. The file data can be any storable data such as documents, videos, and audio.

[0062] Specifically, after a matching failure, the information feedback module 126 generates access failure information, which can be text or pre-defined characters, and sends this information to the external device 20. Upon receiving the access failure information, the external device 20 confirms the access failure and can notify the user of the failure via text prompts, voice prompts, etc. Text prompts can include phrases like "Access failed," "Incorrect password," or "false," while voice prompts can include a spoken message saying "Access failed," or a sound like an alarm or beeping.

[0063] Optionally, the device may also include: a first switch 13;

[0064] The first terminal R1 of the first switch 13 is connected to the external interface 50 to connect to the external device 20 through the external interface 50. The second terminal R2 of the first switch 13 is connected to the password management device 12. The third terminal R3 of the first switch 13 is connected to the storage controller 30. The first terminal R1 of the first switch 13 is connected to the second terminal R2.

[0065] The data control module 125 is specifically used to generate control commands and send them to the control terminal of the first switch after a successful match.

[0066] The control terminal of the first switch 13 is used to disconnect the first terminal R1 and the second terminal R2 of the first switch 13 after receiving a control command, and to connect the first terminal R1 and the third terminal R3 to conduct external device 20 and storage controller 40.

[0067] In this embodiment, the first switch 13 can be understood as an electronic switch, such as a single-pole double-throw switch; the external interface 50 can be a serial bus interface (USB interface); and the control command can be understood as a computer command to control the first switch 13.

[0068] Specifically, after the first password and the second pre-stored password are successfully matched, the data control module 125 generates a control command. The generation rules for the control command can be preset, and the control command is generated according to certain rules. The data control module 125 sends the control command to the control terminal of the first switch 13, so that the control terminal can control the on / off state of the first switch 13. After receiving the control command, the control terminal of the first switch 13 controls the first terminal R1 and the second terminal R2 of the first switch 13 to disconnect, and controls the first terminal R1 to connect with the third terminal R3, thus connecting the external device 20 and the storage controller 30. At this time, the external device 20 can access the storage device 40 through the storage controller 30.

[0069] It should be noted that the number of first switches 13 in this embodiment can be one or more, depending on the signal transmitted by the external interface. If the signal transmitted by the external interface is a multi-channel signal (e.g., a pair of differential signals), then the number of first switches 13 is also multiple, with each first switch 13 controlling one signal.

[0070] The password management device provided in this embodiment uses a hardware-isolated encryption mode to encrypt the storage device. Compared with the software partitioning encryption method used in the prior art for encrypted storage, it is more secure and resistant to cracking. This application combines the encrypted storage and login device into one unit, making it convenient to carry and manage. Furthermore, it only occupies one interface and requires only one connection during use.

[0071] The password management device provided in this application can be applied in privacy-critical and important business settings, such as R&D engineers who need to back up code and have personal computer login permissions; in company settings where only personal computers and cloud terminals are allowed; for managing confidential business meeting documents and confidential computer login permissions; for managing the confidentiality of official computers and official documents; and for managing personal hobbies and privacy permissions.

[0072] Optionally, the password management device 12 also includes:

[0073] The power control module 127 is connected to the data control module 125 and is used to control the storage controller 30 to power on after receiving the power-on command sent by the data control module 125.

[0074] The power-on command is generated by the data control module 125 after the password is successfully matched.

[0075] In this embodiment, the power control module 127 can be specifically understood as a module that controls the power supply to and from the device. The power-on command can be specifically understood as a command that controls the power supply to the memory 30.

[0076] Specifically, after the first password and the second pre-stored password are successfully matched, the data control module 125 generates a power-on command, which can be generated according to pre-set rules. The power control module 127 is connected to the data control module 125, receives the power-on command sent by the data control module 125, controls the storage controller 30 to power on, provides power to the storage controller, and ensures the normal operation of the storage controller 30.

[0077] Optionally, the device may also include: a second switch 14;

[0078] The first terminal Z1 of the second switch 14 is connected to the power supply terminal of the external interface 50, the second terminal Z2 of the second switch 14 is connected to the power supply terminal of the storage controller 30, and the control terminal of the second switch 14 is connected to the power control module 127.

[0079] The control terminal of the second switch 14, in response to the control of the power control module 127, controls the connection of the first terminal Z1 and the second terminal Z2 to conduct the external interface 50 and the storage controller 30.

[0080] In this embodiment, the second switch 14 can be understood as an electronic switch, such as a single-pole single-throw switch.

[0081] Specifically, the power control module 127 powers on the storage controller 30 by controlling the second switch 14. The power control module 127 can control the second switch 14 via commands, such as sending a conduction command to the control terminal of the second switch 14. In response to the control of the power control module 127, the control terminal of the second switch 14 connects the first terminal Z1 and the second terminal Z2, thus connecting the external interface 50 and the storage controller 30, allowing the external device 20 to provide power to the storage controller 30 through the external interface 50.

[0082] For example, Figure 4This diagram illustrates an example of the collaborative operation of a password management device and a storage device, provided by an embodiment of the present invention. Taking an external interface 50 as an example, it uses a USB 3.0 interface. The USB 3.0 interface includes at least the following pins: VCC, D+, D-, TX-, TX+, RX-, and RX+, where VCC represents the power supply voltage; since USB signals transmit a pair of differential signals, they are transmitted through two data lines, D+ representing the positive polarity data line and D- representing the negative polarity data line; TX- and TX+ are the pins for transmitting signals, and RX- and RX+ are the pins for receiving signals.

[0083] The password management device 10 includes at least the following pins: VCC, D+, D-, as well as a data control module 125 and a power control module 127. The password management device 10 also includes: two first switches 13, a second switch 14, a logic control module LOGIC, high-side drivers HSD1+, HSD2+, HSD1-, HSD2-, S (off), and OE (output enable). VCC represents the power supply voltage; D+ and D- transmit a pair of differential signals; HSD1+, HSD1-, HSD2+, and HSD2- enable the storage controller 30 by closing the switches. The data control module 125 sends control commands to the S or OE pins, controlling the logic control module LOGIC, which in turn controls the on / off state of the first switches 13. It should be noted that since the USB 3.0 signal is a pair of differential signals, there are two first switches 13, each controlling one signal.

[0084] The storage controller 30 includes a USB 3.0 interface for connecting to an external interface. The storage controller 30 includes at least the following pins in the USB 3.0 interface: VCC, D+, D-, TX-, TX+, RX-; where VCC represents the power supply voltage; D+ and D- transmit a pair of differential signals; TX- and TX+ are the pins for transmitting signals, and RX- and RX+ are the pins for receiving signals.

[0085] The technical solution of this invention solves the problem of occupying multiple interfaces when using passwords. The password management device connects to an external device, obtains the working status of the external device, and switches the device state according to the working status of the external device. The device state is either a storage state or a non-storage state. The storage state realizes the password storage function, while the non-storage state realizes the login function and encryption function. The password management device can realize the corresponding functions by switching the device state, and then process the first password accordingly. The password management device of this application can switch the device state of the device itself according to the working status of the external device, integrating storage function and other functions into one, realizing the function of multiple purposes of one device. When connecting to an external device through an interface, only one interface is needed, which effectively saves interface resources, making it more convenient to use. Furthermore, it realizes different functions through one product, which is convenient for management and portability, and improves the user experience. The hardware-isolated encryption mode is used to encrypt the storage device, which has higher security and is not afraid of being cracked.

[0086] Example 4

[0087] Figure 5 This is a schematic diagram of a password management system provided in Embodiment 4 of the present invention. The system includes: a password management device 10 and an external device 20 provided in any embodiment of the present invention. The password management device includes a password acquisition device 11 and a password management device 12.

[0088] Password acquisition device 11, connected to password management device 11, is used to acquire the first password entered by the user and transmit it to the password management device 11 of the password management device;

[0089] The password management device 12 is connected to the external device 20 and is used to obtain the working status of the external device 20, determine the device status according to the working status of the external device 20, and perform password management according to the device status and the first password. The device status is either a storage status or a non-storage status.

[0090] The technical solution of this invention solves the problem of occupying multiple interfaces when using passwords. The password management device connects to an external device, obtains the working status of the external device, and switches the device state according to the working status of the external device. The device state is either a storage state or a non-storage state. The storage state realizes the password storage function, and the non-storage state realizes the login function and encryption function. The password management device can realize the corresponding functions by switching the device state, and then process the first password accordingly. The password management device of this application can switch the device state of the device itself according to the working status of the external device, integrates storage function and other functions into one, realizes the function of multiple purposes of one device, and only one interface is needed when connecting to the external device, which effectively saves interface resources, makes it more convenient to use, and realizes different functions through one product, which is convenient for management and portability, and improves the user experience.

[0091] Optional, Figure 6 This is a schematic diagram of another password management system. Based on the above embodiment, the password management system is further refined. The system also includes: a storage controller 30 and a storage device 40.

[0092] The password management device 11 is connected to the storage controller 30, and the storage controller 30 is connected to the storage device 40, which is used to store file data.

[0093] The password management device 11 includes:

[0094] Matching module 124 is used to match the first password with the second pre-stored password when the device is in storage state and accesses the external device 20;

[0095] Data control module 125 is used to control the external device 20 to connect to the storage controller 30 if the match is successful, so that the external device 20 can access the file data stored in the storage device 40 through the storage controller 30;

[0096] The information feedback module 126 is used to send access failure information to the external device 20 if the matching fails.

[0097] The password management device and external device in the password management system provided in the embodiments of the present invention can realize the functions of the password management device and external device provided in any embodiment of the present invention, and have corresponding beneficial effects.

[0098] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0099] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A password management device, characterized in that, include: Password acquisition device and password management device; The password acquisition device is connected to the password management device and is used to acquire the first password entered by the user and transmit it to the password management device. The password management device is connected to an external device and is used to obtain the working status of the external device, determine the device status based on the working status of the external device, and perform password management based on the device status and a first password. The device status is either a storage status or a non-storage status. The correspondence between the working status of the external device and the device status is preset. The password management device is connected to the storage controller, the storage controller is connected to the storage device, and the storage device is used to store file data; the password management device includes: The matching module is used to match the first password with the second pre-stored password when the device is in storage state and the external device is accessed; wherein the second pre-stored password is used to verify user permissions when accessing the storage device; The data control module is used to control the connection between the external device and the storage controller if a match is successful, so that the external device can access the file data stored in the storage device through the storage controller. The information feedback module is used to send access failure information to the external device if the matching fails. The password management device further includes: a first switch; The first end of the first switch is connected to an external interface for connection to an external device via the external interface; the second end of the first switch is connected to the password management device; the third end of the first switch is connected to the storage controller; and the first end of the first switch is connected to the second end. The data control module is specifically used to generate a control command and send it to the control terminal of the first switch after a successful match. The control terminal of the first switch is used to control the first terminal of the first switch to disconnect from the second terminal after receiving a control command, and to control the first terminal to connect to the third terminal, so as to connect the external device and the storage controller.

2. The device according to claim 1, characterized in that, The non-storage state is either a login state or an encrypted state; the password management device includes: The first state determination module is used to determine the device state as login state when the working state of the external device is account login. The second state determination module is used to determine that the device state is encrypted when the external device's working state is data encryption. The third state determination module is used to determine the device state as storage state when the external device's working state is password storage or data access.

3. The device according to claim 1, characterized in that, The password management device is specifically used for: When the device is in a logged-in state, the first password is matched with the first pre-stored password; If the match is successful, it is determined that the user has login permission, and feedback is sent to the external device so that the external device can log in to the account; If the match fails, it is determined that the user does not have login privileges, and this is reported to the external device.

4. The device according to claim 1, characterized in that, The password management device is specifically used for: When the device is in an encrypted state, the first password is sent to the external device so that the external device can encrypt the information to be encrypted according to the first password.

5. The device according to claim 1, characterized in that, The password management device is specifically used for: When the device is in storage mode and a password storage instruction is received, the first password is stored.

6. The device according to claim 5, characterized in that, The password management device further includes: A power control module, connected to the data control module, is used to control the storage controller to power on after receiving a power-on command sent by the data control module; The power-on command is generated by the data control module after the password is successfully matched.

7. The device according to claim 6, characterized in that, Also includes: Second switch; The first end of the second switch is connected to the power supply terminal of the external interface, the second end of the second switch is connected to the power supply terminal of the storage controller, and the control terminal of the second switch is connected to the power control module. The control terminal of the second switch, in response to the control of the power control module, controls the connection between the first terminal and the second terminal to conduct the external interface and the storage controller.

8. A password management system, characterized in that, include: The password management device and external device according to any one of claims 1-7, wherein the password management device includes a password acquisition device and a password management device; The password acquisition device is connected to the password management device and is used to acquire the first password entered by the user and transmit it to the password management device of the password management device. The password management device is connected to the external device and is used to obtain the working status of the external device, determine the device status based on the working status of the external device, and perform password management based on the device status and a first password. The device status is either a storage status or a non-storage status.

9. The system according to claim 8, characterized in that, It also includes: storage controllers and storage devices; The password management device is connected to the storage controller, the storage controller is connected to the storage device, and the storage device is used to store file data; The password management device includes: A matching module is used to match the first password with the second pre-stored password when the device is in storage state and accesses the external device; The data control module is used to control the connection between the external device and the storage controller if a match is successful, so that the external device can access the file data stored in the storage device through the storage controller. The information feedback module is used to send access failure information to the external device if the matching fails.

Images